Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,554CVE records
2,892Published, last 7 days
1,728In CISA KEV
1,419Critical, last 30 days
5,599Analysed
01:16 UTCLast NVD sync
Filters Show:
65 results. Gitlab Gitlab.
Page 1 of 4| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-85706 | Critical | 10.0 |  Gitlab | Path traversal | Listed | Confirmed | 91% | Sep 12, 2026 |
| CVE-2026-75871 | Critical | 9.6 | Gitlab | Server-side request forgery (SSRF) | — | — | 0.34% | Aug 27, 2026 |
| CVE-2026-19478 | Critical | 9.1 | Gitlab | Code injection | — | — | 60% | Aug 17, 2026 |
| CVE-2026-16627 | Critical | 9.0 | Gitlab | Cross-site scripting | — | — | 0.48% | Aug 12, 2026 |
| CVE-2025-7659 | Critical | 9.1 | Gitlab | Origin validation error | — | — | 0.19% | Feb 11, 2026 |
| CVE-2025-13761 | Critical | 9.6 | Gitlab | Cross-site scripting | — | — | 0.71% | Jan 9, 2026 |
| CVE-2025-9642 | Critical | 9.6 | Gitlab | Cross-site scripting | — | — | 0.54% | Sep 26, 2025 |
| CVE-2025-5121 | Critical | 9.9 | Gitlab | Missing authorization | — | — | 12% | Jun 20, 2025 |
| CVE-2023-3441 | Critical | 9.1 | Gitlab | CWE-213 | — | 2 refs | 0.55% | Oct 1, 2024 |
| CVE-2024-2743 | Critical | 9.1 | Gitlab | Incorrect authorization | — | — | 0.40% | Sep 12, 2024 |
| CVE-2024-45409 | Critical | 9.8 |  Onelogin Ruby Saml +2 | Improper verification of cryptogra | — | — | 11% | Sep 10, 2024 |
| CVE-2024-6385 | Critical | 9.8 | Gitlab | Improper access control | — | — | 6.1% | Jul 11, 2024 |
| CVE-2024-0402 | Critical | 9.9 | Gitlab | Path traversal | — | — | 3.8% | Jan 26, 2024 |
| CVE-2023-7028 | Critical | 9.8 | Gitlab | Weak password recovery | Listed | Confirmed | 95% | Jan 12, 2024 |
| CVE-2023-5009 | Critical | 9.8 | Gitlab | Incorrect authorization | — | — | 9.7% | Sep 19, 2023 |
| CVE-2023-4008 | Critical | 9.8 | Gitlab | CWE-708 | — | — | 0.71% | Aug 3, 2023 |
| CVE-2018-17452 | Critical | 9.8 | Gitlab | Server-side request forgery (SSRF) | — | — | 0.74% | Apr 15, 2023 |
| CVE-2023-1708 | Critical | 9.8 | Gitlab | Command injection | — | — | 1.1% | Apr 5, 2023 |
| CVE-2022-3726 | Critical | 9.0 | Gitlab | — | — | — | 0.83% | Nov 10, 2022 |
| CVE-2022-2826 | Critical | 9.8 | Gitlab | Cross-site scripting | — | — | 0.89% | Oct 28, 2022 |
